
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File: 6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier: uBYlgQx0RQPdl6YUSmU37NENqeMUxURlvYeytdrV/xs=
Subject key identifier: 11:76:66:47:9D:46:1F:75:6C:18:34:69:8C:4A:CE:D8:4F:D6:2E:E1
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer: /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial: 019677C3BEC94EDB8EA587BDFAA56E935405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number: 0402
Signing time: Sun 27 Apr 2025 15:00:39 +0000
Manifest this update: Sun 27 Apr 2025 15:00:39 +0000
Manifest next update: Mon 28 Apr 2025 15:00:39 +0000
Files and hashes: 1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: R3quS1RrIseiopG34/BUphf1oeYDc9PXXWfUXCo6dmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:be:c9:4e:db:8e:a5:87:bd:fa:a5:6e:93:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Validity
Not Before: Apr 27 15:00:39 2025 GMT
Not After : Apr 28 15:00:39 2025 GMT
Subject: CN=117666479d461f756c1834698c4aced84fd62ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:5e:78:55:06:26:21:31:fa:38:55:12:3c:
ed:c1:d9:f5:f6:6b:aa:5c:ac:cb:96:ba:71:63:6e:
76:0a:c8:78:71:19:27:73:01:72:1a:55:70:30:9c:
c2:fb:c0:3b:32:58:76:7b:73:15:e4:35:ff:22:e6:
ec:fb:58:c1:cd:9b:93:77:8b:29:1f:30:3a:e4:9b:
44:b6:26:ae:7b:df:44:e4:6d:db:b8:b2:5e:9a:e0:
6c:5d:69:b5:4e:da:e2:05:a6:6b:5d:ba:81:8c:c7:
3b:b3:94:cf:e3:6a:96:8c:f7:d9:31:5c:fa:d8:7f:
e7:c8:72:a5:e7:1c:88:24:0f:1e:61:a7:19:5d:33:
90:e6:91:74:97:1f:c3:f9:04:82:fa:ff:5d:d2:99:
18:a0:83:bd:aa:17:ea:76:4c:5a:4e:ef:07:6b:82:
32:3b:3a:ef:d8:3a:a4:4f:84:a3:b0:3d:2f:ba:de:
eb:32:64:fc:35:37:58:59:c0:4e:9c:d9:c3:b7:9e:
98:1e:1e:c9:d5:fe:6b:62:c6:75:a1:6a:f4:d8:dd:
ec:d8:ec:f7:de:56:28:7d:0b:2c:18:57:31:a3:92:
59:5f:5f:ac:8b:c4:b3:8f:1b:be:f4:26:2f:18:bf:
d8:b0:93:1f:dc:b6:bd:69:04:ed:8a:84:a8:c4:d7:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:66:47:9D:46:1F:75:6C:18:34:69:8C:4A:CE:D8:4F:D6:2E:E1
X509v3 Authority Key Identifier:
keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d4:f9:9a:5a:5a:2b:53:d2:fd:20:db:77:27:4e:85:29:cd:
87:cd:07:08:78:d4:04:28:a7:58:99:19:37:31:13:ab:dd:b7:
9d:38:b8:90:6f:20:7a:04:82:8f:45:d3:bb:17:02:88:bd:73:
9d:73:c2:39:78:b7:a8:8f:f7:06:fd:c7:c7:40:72:ec:ec:72:
1f:05:4e:0e:17:82:63:93:5a:b3:ac:8b:d5:5b:9c:2e:51:87:
4c:a8:24:77:18:8a:fc:64:70:d6:ea:6c:30:9d:80:a4:f6:fc:
23:03:ef:21:a5:7d:fb:e0:0b:53:72:50:1f:5a:70:79:34:01:
37:81:2a:c2:c5:93:f0:1f:07:7b:03:ab:1a:99:5f:14:db:28:
b8:88:a2:94:c4:8d:50:7c:c3:02:7a:f9:d2:19:35:e3:35:b4:
c8:d6:74:09:a3:e1:b9:7e:37:92:79:58:a9:1d:69:31:88:b7:
63:9d:8f:e5:dc:1d:c1:2d:00:14:9d:55:cf:89:e3:5e:52:9d:
3a:26:e6:20:2e:95:ac:ed:cb:c6:47:dc:48:23:f6:81:5e:2c:
e8:6c:9a:f3:30:77:7a:86:ac:34:53:d9:2a:be:d5:4b:a5:02:
82:37:09:46:7d:c6:59:a9:13:c4:17:57:c7:f0:c3:27:7c:c9:
7b:3f:a0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w77JTtuOpYe9+qVuk1QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWU2ZGZiMzkyOTVjOTNhMDQ3MmM5YzEzNTU5NDAxOGE4
ZmNiNWMwHhcNMjUwNDI3MTUwMDM5WhcNMjUwNDI4MTUwMDM5WjAzMTEwLwYDVQQD
EygxMTc2NjY0NzlkNDYxZjc1NmMxODM0Njk4YzRhY2VkODRmZDYyZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisteeFUGJiEx+jhVEjztwdn19muq
XKzLlrpxY252Csh4cRkncwFyGlVwMJzC+8A7Mlh2e3MV5DX/Iubs+1jBzZuTd4sp
HzA65JtEtiaue99E5G3buLJemuBsXWm1TtriBaZrXbqBjMc7s5TP42qWjPfZMVz6
2H/nyHKl5xyIJA8eYacZXTOQ5pF0lx/D+QSC+v9d0pkYoIO9qhfqdkxaTu8Ha4Iy
Ozrv2DqkT4SjsD0vut7rMmT8NTdYWcBOnNnDt56YHh7J1f5rYsZ1oWr02N3s2Oz3
3lYofQssGFcxo5JZX1+si8Szjxu+9CYvGL/YsJMf3La9aQTtioSoxNfYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF2ZkedRh91bBg0aYxKzthP1i7hMB8GA1UdIwQY
MBaAFOsebfs5KVyToEcsnBNVlAGKj8tcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEt
ZjA4NWFmOTU3YzhkLzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEtZjA4NWFmOTU3Yzhk
LzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdT5mlpa
K1PS/SDbdydOhSnNh80HCHjUBCinWJkZNzETq923nTi4kG8gegSCj0XTuxcCiL1z
nXPCOXi3qI/3Bv3Hx0By7OxyHwVODheCY5Nas6yL1VucLlGHTKgkdxiK/GRw1ups
MJ2ApPb8IwPvIaV9++ALU3JQH1pweTQBN4EqwsWT8B8HewOrGplfFNsouIiilMSN
UHzDAnr50hk14zW0yNZ0CaPhuX43knlYqR1pMYi3Y52P5dwdwS0AFJ1Vz4njXlKd
OibmIC6VrO3LxkfcSCP2gV4s6Gya8zB3eoasNFPZKr7VS6UCgjcJRn3GWakTxBdX
x/DDJ3zJez+gcQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:22:20 2025 by rpki-client